3 ms·

Why not Matrix? Here's one reason: it has incredibly hard-to-debug edge cases, and plenty of bugs. One of my favourites is the one where people are kicked out

Why not Matrix? Here's one reason: it has incredibly hard-to-debug edge cases, and plenty of bugs. One of my favourites is the one where people are kicked out of your room at random, which was reported a year ago[0]. It wasn't fixed, however, because the head of the Matrix foundation (Matthew) didn't seem to like the issue being posted on Twitter. The reporter took down the tweet, and it's still now effectively abandoned (despite it still being an issue; I've spoken to quite a few mods about it). This is honestly really disappointing behaviour from a platform owner. [0]: https://github.com/matrix-org/synapse/issues/14481 https://github.com/matrix-org/synapse/issues/14481

Arathorn 3y ago
wow, the pile-on is real tonight. I suggested that GrapheneOS stopped enumerating potential ways to attack Matrix rooms on Twitter if they actually wanted to discourage attacks. Meanwhile, that issue has not remotely been abandoned, and has continued to be worked on in private (given the risk it might have security impact) - although as it's a rare edge case without a known security impact, it's competing with a lot of the other work we do to support Matrix, hence slow progress; especially with highly constrained funding.
- meepmorp 3y ago
  > wow, the pile-on is real tonight. I know it's incredibly hard to not take it personally when people call your baby ugly, but you're not helping things by being defensive. People seem to have issues with how you (as a company) handle bugs and criticism, and while it may not seem fair or accurate, at very least, it's likely that your company's responses contribute to the perception. If nothing else, it points out a communication problem.
- tentacleuno 3y ago
  > wow, the pile-on is real tonight. My intent isn't to "pile-on"; it's to provide insight into the issues people have with Matrix. I understand that it's your creation, but judging by this and the GitHub thread, it seems like you get quite defensive in these situations. Ultimately, these are valid criticisms of the platform; people aren't personally attacking you or the project. Personally I commend what you've created. > I suggested that GrapheneOS stopped enumerating potential ways to attack Matrix rooms on Twitter if they actually wanted to discourage attacks. Well, the issue was posted above. The Graphene guy posted it on Twitter, and by doing so you claimed he "slagged [you] off"[0]. > Meanwhile, that issue has not remotely been abandoned, and has continued to be worked on in private (given the risk it might have security impact) - although as it's a rare edge case without a known security impact, it's competing with a lot of the other work we do to support Matrix, hence slow progress; especially with highly constrained funding. This is the part I don't understand. If you're working on it in private, you acknowledge it may be a security risk (plus your use of the word "attack"), but you've also de-prioritized it because it's not a security risk? [0]: "what the hell is this? We have burnt a bunch of time investigating this and trying to help you on this today, and in return we get slagged off on twitter?!" https://github.com/matrix-org/synapse/issues/14481#issuecomment-1320728391 https://github.com/matrix-org/synapse/issues/14481#issuecomm...
  - Arathorn 3y ago
    > The Graphene guy posted it on Twitter, and by doing so you claimed he "slagged [you] off"[0]. I forget the precise contents of their deleted tweets, and I'd be first to admit that for better or worse I try to be authentic when typing here or elsewhere, rather than faking being calm & anodyne. Based on the feedback here & elsewhere, that's probably a mistake. In this instance, having Graphene screaming about how awful Matrix is and enumerating ways to cause moderation problems was not helpful during a moderation incident, especially where we had been scrambling to help them. > This is the part I don't understand. If you're working on it in private, you acknowledge it may be a security risk (plus your use of the word "attack") Correct. Any bug in the state resolution algorithm could potentially eventually turn out to have security implications. > but you've also de-prioritized it because it's not a security risk? We haven't explicitly de-prioritised, but other things have come along at higher priority. The reason we haven't bumped its priority higher is because it happens rarely, and the chances of security impact look to be relatively low.
    - tentacleuno 3y ago
      > In this instance, having Graphene screaming about how awful Matrix is and enumerating ways to cause moderation problems was not helpful during a moderation incident, especially where we had been scrambling to help them. To be fair, from what I hear GrapheneOS doesn't have the best reputation for its communication with other people, but strcat did appear rather apologetic in the thread. Regardless, we're experiencing the bug I linked, so it's definitely still an issue. > especially where we had been scrambling to help them. Hmm, this is where I disagree -- if you've been scrambling to help, wouldn't the issue have been fixed by now?
      - Arathorn 3y ago
        > Hmm, this is where I disagree -- if you've been scrambling to help, wouldn't the issue have been fixed by now? We scrambled to investigate and fix this particular instance (and previous unrelated instances where they'd had problems). When we realised that they were simultaneously screaming about how shit we were, we put it back on the shelf.
- Jasper_ 3y ago
  Talking about a serious bug where thousands of people appear to be kicked from rooms that's been going on for over a year is not a "pile-on". It's a very bad experience for everyone involved, and people are just pointing it out. Your inability to empathize with other people having a bad experience using your product is not doing you favors here. Matrix and Element are consistently one of the buggiest messaging applications I interact with, and I've waited years for it to be better.
  - tentacleuno 3y ago
    > Matrix and Element are consistently one of the buggiest messaging applications I interact with Oh same, though I've found that Nheko Reborn is a much better client than Element (like, it's not even close). There's no getting around Synapse though; we're actually experiencing the bug I linked above, and it's absolutely dreadful to deal with.
vilunov 3y ago
FYI I'm referring to the specific "why not matrix?" piece which was posted on telegraph and then was replied to by a matrix developer on lobsters. I don't want to link to them directly, hopefully you can find them both, but it's a good read if you thought about going all in on Matrix. The response particularly left me disappointed, since we still experience lots of bugs, which were allegedly fixed.

Arathorn 3y ago

wow, the pile-on is real tonight. I suggested that GrapheneOS stopped enumerating potential ways to attack Matrix rooms on Twitter if they actually wanted to discourage attacks. Meanwhile, that issue has not remotely been abandoned, and has continued to be worked on in private (given the risk it might have security impact) - although as it's a rare edge case without a known security impact, it's competing with a lot of the other work we do to support Matrix, hence slow progress; especially with highly constrained funding.

meepmorp 3y ago
> wow, the pile-on is real tonight. I know it's incredibly hard to not take it personally when people call your baby ugly, but you're not helping things by being defensive. People seem to have issues with how you (as a company) handle bugs and criticism, and while it may not seem fair or accurate, at very least, it's likely that your company's responses contribute to the perception. If nothing else, it points out a communication problem.
tentacleuno 3y ago
> wow, the pile-on is real tonight. My intent isn't to "pile-on"; it's to provide insight into the issues people have with Matrix. I understand that it's your creation, but judging by this and the GitHub thread, it seems like you get quite defensive in these situations. Ultimately, these are valid criticisms of the platform; people aren't personally attacking you or the project. Personally I commend what you've created. > I suggested that GrapheneOS stopped enumerating potential ways to attack Matrix rooms on Twitter if they actually wanted to discourage attacks. Well, the issue was posted above. The Graphene guy posted it on Twitter, and by doing so you claimed he "slagged [you] off"[0]. > Meanwhile, that issue has not remotely been abandoned, and has continued to be worked on in private (given the risk it might have security impact) - although as it's a rare edge case without a known security impact, it's competing with a lot of the other work we do to support Matrix, hence slow progress; especially with highly constrained funding. This is the part I don't understand. If you're working on it in private, you acknowledge it may be a security risk (plus your use of the word "attack"), but you've also de-prioritized it because it's not a security risk? [0]: "what the hell is this? We have burnt a bunch of time investigating this and trying to help you on this today, and in return we get slagged off on twitter?!" https://github.com/matrix-org/synapse/issues/14481#issuecomment-1320728391 https://github.com/matrix-org/synapse/issues/14481#issuecomm...
- Arathorn 3y ago
  > The Graphene guy posted it on Twitter, and by doing so you claimed he "slagged [you] off"[0]. I forget the precise contents of their deleted tweets, and I'd be first to admit that for better or worse I try to be authentic when typing here or elsewhere, rather than faking being calm & anodyne. Based on the feedback here & elsewhere, that's probably a mistake. In this instance, having Graphene screaming about how awful Matrix is and enumerating ways to cause moderation problems was not helpful during a moderation incident, especially where we had been scrambling to help them. > This is the part I don't understand. If you're working on it in private, you acknowledge it may be a security risk (plus your use of the word "attack") Correct. Any bug in the state resolution algorithm could potentially eventually turn out to have security implications. > but you've also de-prioritized it because it's not a security risk? We haven't explicitly de-prioritised, but other things have come along at higher priority. The reason we haven't bumped its priority higher is because it happens rarely, and the chances of security impact look to be relatively low.
  - tentacleuno 3y ago
    > In this instance, having Graphene screaming about how awful Matrix is and enumerating ways to cause moderation problems was not helpful during a moderation incident, especially where we had been scrambling to help them. To be fair, from what I hear GrapheneOS doesn't have the best reputation for its communication with other people, but strcat did appear rather apologetic in the thread. Regardless, we're experiencing the bug I linked, so it's definitely still an issue. > especially where we had been scrambling to help them. Hmm, this is where I disagree -- if you've been scrambling to help, wouldn't the issue have been fixed by now?
    - Arathorn 3y ago
      > Hmm, this is where I disagree -- if you've been scrambling to help, wouldn't the issue have been fixed by now? We scrambled to investigate and fix this particular instance (and previous unrelated instances where they'd had problems). When we realised that they were simultaneously screaming about how shit we were, we put it back on the shelf.
Jasper_ 3y ago
Talking about a serious bug where thousands of people appear to be kicked from rooms that's been going on for over a year is not a "pile-on". It's a very bad experience for everyone involved, and people are just pointing it out. Your inability to empathize with other people having a bad experience using your product is not doing you favors here. Matrix and Element are consistently one of the buggiest messaging applications I interact with, and I've waited years for it to be better.
- tentacleuno 3y ago
  > Matrix and Element are consistently one of the buggiest messaging applications I interact with Oh same, though I've found that Nheko Reborn is a much better client than Element (like, it's not even close). There's no getting around Synapse though; we're actually experiencing the bug I linked above, and it's absolutely dreadful to deal with.

vilunov 3y ago

FYI I'm referring to the specific "why not matrix?" piece which was posted on telegraph and then was replied to by a matrix developer on lobsters. I don't want to link to them directly, hopefully you can find them both, but it's a good read if you thought about going all in on Matrix. The response particularly left me disappointed, since we still experience lots of bugs, which were allegedly fixed.